IBM Engineering Requirements Management DOORS Next Comment Deletion Vulnerability

A vulnerability exists in IBM Engineering Requirements Management DOORS Next versions 7.0.2, 7.0.3, and 7.1.0, allowing authenticated users on the network to delete comments from other users. This issue arises from client-side enforcement of server-side security, creating a broken access control vulnerability.

Impact

Exploitation of this vulnerability allows for unauthorized deletion of user comments, potentially leading to loss of important information and disruption of communication within the application.

Remediation

Users of IBM Engineering Requirements Management DOORS Next 7.0.2 should install iFix 36. Users of version 7.0.3 should install iFix 19 or newer. Users of version 7.1.0 should install iFix 05 or newer.